<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
Hello Guys!<br>
<div style="color: rgb(0, 0, 0);">
<div>
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<div style="color:rgb(0,0,0)">
<div>
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p><br>
i have some Problems and hope, you can help me! <br>
We are testing for your Applicaton IDP4 with Tomcat9 and all look good, but i get this Messages:
<br>
</p>
<p><br>
</p>
<p></p>
<div>2021-01-09 15:23:47,561 - 10.10.26.0 - WARN [org.opensaml.saml.saml2.profile.impl.AddNameIDToSubjects:334] - Profile Action AddNameIDToSubjects: Request specified use of an unsupportable identifier format: urn:oasis:names:tc:SAML:2.0:nameid-format:persistent<br>
2021-01-09 15:23:47,571 - 10.10.26.0 - WARN [org.opensaml.profile.action.impl.LogEvent:101] - A non-proceed event occurred while processing the request: InvalidNameIDPolicy<br>
<br>
==> idp-process.log <==<br>
2021-01-09 15:23:47,571 - 10.10.26.0 - WARN [org.opensaml.profile.action.impl.LogEvent:101] - A non-proceed event occurred while processing the request: InvalidNameIDPolicy</div>
<div><br>
</div>
<div>we use the <span>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</span> - format, but i have no idea where is should looking for the Problem....</div>
<div><br>
</div>
<div><br>
</div>
<div>
<div><b><u>attribute-resolver.xml</u></b><br>
<br>
</div>
</div>
<div><br>
</div>
<div>
<div><AttributeResolver<br>
xmlns="urn:mace:shibboleth:2.0:resolver"<br>
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"<br>
xsi:schemaLocation="urn:mace:shibboleth:2.0:resolver http://shibboleth.net/schema/idp/shibboleth-attribute-resolver.xsd"><br>
<AttributeDefinition id="uid" xsi:type="PrincipalName"><br>
<AttributeEncoder xsi:type="SAML1String" name="urn:mace:dir:attribute-def:uid" encodeType="false" /><br>
<AttributeEncoder xsi:type="SAML2String" name="urn:oid:0.9.2342.19200300.100.1.1" friendlyName="uid" encodeType="false" /><br>
</AttributeDefinition><br>
<DataConnector id="staticAttributes" xsi:type="Static"><br>
<Attribute id="affiliation"><br>
<Value>member</Value><br>
</Attribute><br>
</div>
<div><br>
</div>
<div><span><b><i></i></b><u><b>saml-nameid.xml</b></u><i><u></u></i><b><i></i></b></span><br>
</div>
</div>
<div><br>
</div>
<div> <util:list id="shibboleth.SAML2NameIDGenerators"><br>
<br>
<ref bean="shibboleth.SAML2TransientGenerator" /><br>
<bean parent="shibboleth.SAML2AttributeSourcedGenerator"<br>
p:omitQualifiers="true"<br>
p:format="urn:oid:0.9.2342.19200300.100.1.1"<br>
p:attributeSourceIds="#{ {'uid'} }" /><br>
<!-- Uncommenting this bean requires configuration in saml-nameid.properties. --><br>
<!--<br>
<ref bean="shibboleth.SAML2PersistentGenerator" /><br>
--><br>
<br>
<br>
<bean parent="shibboleth.SAML2AttributeSourcedGenerator"<br>
p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"<br>
p:attributeSourceIds="#{ {'uid'} }" /><br>
<br>
<br>
</util:list><br>
<br>
<!-- SAML 1 NameIdentifier Generation --><br>
<util:list id="shibboleth.SAML1NameIdentifierGenerators"><br>
<br>
<ref bean="shibboleth.SAML1TransientGenerator" /><br>
<br>
<!--<br>
<bean parent="shibboleth.SAML1AttributeSourcedGenerator"<br>
p:omitQualifiers="true"<br>
p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"<br>
p:attributeSourceIds="#{ {'mail'} }" /><br>
--><br>
<br>
</util:list><br>
<br>
</beans><br>
</div>
<div><br>
</div>
<div>The Connection to the LDAP - Server (Microsoft AD) looks good and after hours reading the xml/codes i have no idea :-(
<br>
</div>
<br>
<p></p>
<p>Greetings,<br>
Phil<br>
</p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>